CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The wizard will close and your trace will display. 6.2 Recording an Existing Piconet Using Recording Wizard to record an existing piconet is similar to recording a new piconet. The main difference is that you will be asked if your Master device can support multiple slave devices and whether it can respond to pages once it has created a piconet with another device. Step 1 To start the Recording Wizard, press Recording Wizard from the menu.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Version 1.6 Press Next to advance to the next screen. You will see three choices: Step 3 Select the second option: I want Merlin to record traffic on a piconet that has already been established. Step 4 Press Next. You will see four choices: Select the hop mode appropriate to your area. Step 5 Select the hop mode appropriate to your area, then press Next.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 You will see two choices: Step 6 Select Perform Inquiry Now. You will see two choices: Step 7 Select the first option: I want Merlin to search for all Bluetooth devices within range. If you want to limit the inquiry to a class of devices, select the second option and enter the hexadecimal value for the device class in the text box.
CATC Merlin Protocol Analyzer User’s Manual Step 8 Version 1.6 Press Next. You will see two choices: Step 9 If you want to change the search duration, type in a new value into the text box. Otherwise, use the default value (20 seconds), then press Next. The PC-Merlin hardware connection will be tested.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 If Merlin passes the hardware test, it will then goes onto conduct a General Inquiry to locate local Bluetooth devices.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 marked Show Devices Found. A screen will display showing the devices that Merlin discovered through the General Inquiry: If you feel that the list is incomplete, you can close this window and press the button marked Repeat. This will cause Merlin to repeat the General Inquiry and recollect information on local Bluetooth devices. Step 11 Press OK to close the Bluetooth Neighborhood window. Step 12 Press Next to advance to the next screen.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 next to the label Piconet Master Address. Step 14 Press Next. The following screen will display. This screen asks you which of the following two options apply to your Master device. For some devices, both options will apply. You can select either or both options. They are not mutually exclusive: If the Master supports inquiries while in a connected state, select the first option.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The screen that follows will depend on the options you selected above. If you selected the first option (=’Sync & Record’), the following screen will display. This screen gives you the option of verifying the presence of the Master device just before synchronizing. Step 16 If you want to skip the Master verification, put a check in the box. If you are in doubt, leave the box unchecked.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 screen, then direct your piconet Master device to connect to Merlin. The Master will attempt to connect to Merlin and therein give Merlin the information it needs to record the Master and slave devices. Step 17 Type in an address of your choosing for Merlin (= Page Target). You are making up an address for Merlin that the Master will use to try to connect to Merlin. Step 18 Press Next Merlin will then display your current settings.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The following dialog box will display: Step 21 Press Retry or Back to re-attempt the process. If the hardware failure described in Steps 20 and 21 do not occur, Merlin will conduct an inquiry. The screen will show that Merlin is going to attempt a recording in either ’Passive Sync & Record’ mode as shown below or in ’Sync & Record’ mode depending on the options you selected in Step 15.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Once Merlin has the information it needs, it will begin recording. The following screen will display: The recording will end following a trigger event or when you press Stop Recording button on the screen shown above or when you press the button on the toolbar. Step 23 When finished, press Close to close the Recording Wizard. 6.3 Recording in Test Mode A Test Mode recording allows you to limit the frequency hopping range that Merlin will record.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Version 1.6 Press Next to advance to the Recording Type screen. The following screen will display: Step 3 Select the third option: I am using Bluetooth Test Mode and want Merlin to record traffic on my test piconet. Step 4 Press Next.
CATC Merlin Protocol Analyzer User’s Manual Step 5 Version 1.6 Select the option Reduced-hopping mode, then press Next. The following screen will display: Step 6 Select the address for your piconet’s Master device from the drop-down menu. If you prefer, you can type in the address into the box. Step 7 Press Next. The following screen will display. This screen will show the current settings for the recording: The Advanced button will open the Recording Options dialog box.
CATC Merlin Protocol Analyzer User’s Manual Step 8 Press Next to begin the recording. The following screen will display: Step 9 When the recording finishes, the following screen will display. You can repeat the recording by pressing the Repeat button. Step 10 To close the wizard, press Finish. 58 Version 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 7. Recording Options The Recording Options dialog box controls how Merlin records Bluetooth™ data. At the top of the Recording Options dialog box are four tabs that provide access to dialog boxes called General, Modes, Events, and Actions. Using these dialog boxes, you can configure Merlin to create event triggers, increase or decrease memory allocation for recording, and interact with other Bluetooth™ devices in different ways.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 7.1 Recording Options - General The General tab opens a window shown in the previous illustration made up of four boxes marked Recording Type, Buffer Size, Trigger Position, and Options. Recording type The Recording Type box presents three options that allow you to set how Merlin begins and ends a recording. The options are: Snapshot, Manual Trigger, and Event Trigger.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Options The Options box contains two options: Beep When Trigger Occurs Will cause the PC to beep when a trigger event has occurred. Save External Interface Signals Will enable Merlin to record input signals from a breakout board as fields in a trace. Buffer Size The Buffer Size box has a slide bar for adjusting the recording buffer size from 0.1 megabytes to 128 megabytes. The Recording Type option determines how this buffer is used.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 • 95% post-triggering: 0.8MB pre-trigger, 15.2MB post-trigger • 75% post-triggering: 4MB pre-trigger, 12MB post-trigger • 50% post-triggering: 8MB pre-trigger, 8MB post-trigger • 25% post-triggering: 12MB pre-trigger, 4MB post-trigger • 5% post-triggering: 15.2MB pre-trigger, 0.8MB post-trigger Note When a Trigger occurs, recording continues until the post-Trigger amount of the buffer is filled. 7.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Recording Mode To record Bluetooth™ traffic, the Merlin analyzer needs to synchronize to the piconet under observation. Merlin does not participate in the piconet and behaves as a passive listener. It needs, however, to communicate briefly with the devices in the piconet to learn the Master clock and frequency hopping sequence. To synchronize to the piconet under observation, Merlin can be set up in different recording modes.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Page Sync & Record "Page Sync and Record" is the recommended method of recording. "Page Sync and Record" should be implemented before a piconet is established. This mode causes Merlin to perform a General Inquiry and collect sync information from the specified slave device when it responds. Merlin then waits for the Master to begin paging the Slave devices. When paging begins, Merlin synchronizes to the Master and begins recording.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Note If the "sync" light on the front of Merlin does not change from flashing to solid it means that Merlin did not synchronize with the piconet when it was established. Sync & Record Sync and Record works just like "Page Sync and Record" except that Merlin takes its sync data directly from the Master instead of the Slave devices. With Sync and Record, Merlin conducts a General Inquiry to get hop frequency and clock information from the Master.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Master device. When the piconet Master pages Merlin, Merlin obtains the information necessary for synchronization and then attempts to synchronize to the piconet controlled by that Master. "Passive Sync and Record" is designed to be used with established piconets or private device networks. Running "Passive Sync and Record" with Established Piconets For most situations, "Passive Sync and Record" will be run after a piconet has been established.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Running "Passive Sync and Record" with Private Device Piconets Because private device networks do not allow other devices to join the network, Merlin needs to temporarily assume the identity of a slave in the network in order to join that network. To do this requires disabling the slave and beginning the operation without an established piconet. The following steps show the process. Step 1 Turn the Master device on and the slave device off.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Hop Frequency menu changes and displays two options called Limited Hop and Fixed Frequency. The "Limited Hop" setting restricts Merlin to five hop frequencies defined in the test mode specification of the Bluetooth™ Specification. • Fixed Frequency - Allows the the transmit and receive frequency ranges to be specified. Selecting this option highlights the "DUT Xmit" and "DUT Recv" text boxes.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 This option only works with Page Sync and Record mode. Show Paging Traffic Show Paging Traffic causes Merlin to capture paging traffic between the Master and Page Target devices. This option is used only with Page Sync and Record Mode. Piconet Addresses (MSB -> LSB) • Master Addr - Piconet Master Address for device under observation. Used for all Piconet recording modes. • Page Target - User selectable address for the Merlin Analyzer.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Sync Window The Sync Window slide bar controls the amount of time that Merlin should wait between receiving an Inquiry Response (which will cause the Sync LED to blink) and detecting Master-Slave piconet traffic (which will cause the Sync LED to turn solid.) A "Narrow" setting means that the wait time will be minimal, a "Wide" setting means it will be "maximal." The default is "Narrow" and this is suitable for most recordings.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Events Options • Click the Events tab on the Recording Options screen. You see the Event Groups window: The Event triggering and filtering options allow you to set event conditions for errors and/or a variety of packet characteristics. Clicking a check box causes further options to display in the right side of the window.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Filter Empty Slots If "Filter Empty Slots" is checked, Merlin will exclude all empty time slots from a recording except for those that lie immediately in front of Bluetooth™ communications packets. These remaining empty packets are preserved to give timestamp and frequency hop reference data to the packets that follow.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Packet Type The Packet Type drop down menu lets you select the following packet types for filtering or triggering: NULL, POLL, FHS, DM1, DH1, HV1, HV2, HV3, DV, AUX1, DM3, DH3, 1100, 1101, DM5, or DH5. Select “Don’t Care” if you want Merlin to ignore this field. AM_ADDR (Active Member Address) The AM_ADDR is a three bit slave address.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 • Select Payload Headers under Event Groups. You see the Payload Headers window L_CH (Logical Channel) The "L_CH" drop down menu presents five options for setting conditions on the Logical Channel: • Don’t care • 00 Undefined • 01 L2CAP continue • 10 L2CAP start • 11 LMP message Select "Don’t care" if you do not want to set conditions on Logical Channel.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Flow works in conjunction with the Logical Channel (L_CH) menu - you select an option from the L_CH menu and then select an option under Flow. Select "Don’t care" if you do not want to set conditions on Flow control. Length (in bytes) Using both the drop down menu and the text box, you can set conditions based on data field length. The maximum length for a single slot packet is 29 bytes. The maximum length for multi-slot packets is 339 bytes.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 • Select Errors under Event Groups. You see the Errors window: Use any combination of the listed packet/signaling/protocol errors as a Trigger. CRC Error A CRC error in the packet data payload of the previous Bluetooth™ data packet. HEC Error An HEC (header error check) error in the packet header for the previous Bluetooth™ data packet.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Header Length Error Indicates that a received Bluetooth™ data packet was terminated before all bits of the packet header were received. Payload Length Error Indicates that the payload of a received Bluetooth™ data packet was either longer than expected, or that a Bluetooth™ data packet terminated before the expected end of the payload data.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 7.4 Recording Options - Actions The Actions screen allows you to specify the type of action that Merlin should perform when it encounters the events specified in the Events window. Actions Window Layout The Actions window divides into three sections: a left, a center, and a right section. The left section displays Event buttons such as Header buttons and Error buttons.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 This center section can also hold Event buttons such as Errors and Payload Hdr1. Event buttons in this section are used to create triggers based on a sequence of Events. Event Sequencing is explained later in the chapter. The right section has three permanent buttons for setting actions. These buttons are Trigger, Filter Out/In, and Restart. These buttons allow you to set actions such as triggering or filtering.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The Actions window showing a condition based on a Poll packet and a counter. This condition reads "Trigger after the 21st Poll packet." Connecting Events to Counters To connect an event to a counter, click an Event button, then click one of the two counter buttons. An arrow will appear that will join the Event to the Counter and then to a trigger.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The following example reads "Trigger after any combination of 5 Poll packets and FHS packets have occurred." Linking Two Events to Two or More Counters - If an Event is linked to Count1 and a second event is linked to Count2, it creates an "or" statement. This statement reads "Trigger when Count1 OR Count2 has reached their specified values." This example reads "Trigger when Count1 has counted 5 Poll packets or Count2 has counted 10 FHS packets.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Counters Blue Dot Menu The Count1 and Count2 blue dot menus allow the value of their counters to be changed. The value you specify here tells Merlin how many instances of an event must take place before a trigger occurs. The counter can be set between 1 and 65,535. To set a Counter, Step 1 Click on the blue dot in the upper left corner of the Count button.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 As an example, look at the specifications set in the following screen: Counter 1 has been set to trigger four events after 15 occurrences. But the Counter does not count 15 occurrences for EACH event. It counts ALL events as they happen to occur until it reaches a total of 15 and then triggers. Filter Out/In Blue Dot Menu The Filter Out/In button toggles between "Filter Out" and "Filter In".
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Blue Dot Menus for the Event Buttons The Errors button and the first Headers button (marked "Hdr1") have the same Blue Dot menus. These menus allow Merlin to trigger external output. To enable or disable external trigger output, Step 1 Click the Blue Dot on an Event button such as Hdr1 or Errors. A menu similar to the one below will open. Your menu may say "Disable" instead of "Enable.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 To configure the output signal, Step 1 Click the blue dot on an Event button that has a small arrow attached to it like the one shown above. A Blue Dot Menu will open. "External Trigger Form" should be a choice available. If it is not, you will need to choose "Enable External Trigger" and then reopen the menu. Step 2 Choose "External Trigger Form" A menu will appear with choices for "Pulse Low", "Pulse High", and "Toggle".
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The elastic arrow appears. Step 2 Drag the arrow to the desired Action button. Step 3 With the pointer over an Actions button, click again the left mouse button again. The arrow is replaced with a black line connecting the Event button to the Action button. Event Sequencing If you drag your mouse from one event button to another, you will create a compound condition known as an Event Sequence.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 To create an event sequence, perform the following steps: Step 1 Select two events from the Events window Step 2 Open the Actions window and click on one of the two Event buttons. An elastic arrow should appear. Step 3 Click on the other event. The arrow should connect to the second button and the second button should instantly change locations to the center section of the window. 7.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 though use of the .rec is recommended; if no extension is specified, .rec is added by default. • Click Load to load a previously saved *.rec file, thus restoring a previous set of Recording Options. • The Save as Default function is equivalent to the Save function, specifying the file name default.rec. Whenever you start up the Analyzer, it automatically loads the default.rec file if one exists.
CATC Merlin Protocol Analyzer User’s Manual Click on the Tool Bar. You see the standard Save As screen. Step 4 Give the recording a unique name and save it to the appropriate directory. 89 Version 1.
CATC Merlin Protocol Analyzer User’s Manual 90 Version 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 8. Display Options Use the Display Options menu to specify the way CATC Trace information is displayed. To open the Display Options menu, • Select Display Options under Setup on the Menu Bar OR • Click on the Tool Bar You see the Display Options window: The Display Options window always opens with the screen for the General tab displayed. 8.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 • Wrap: Inhibits carriage returns in packets when they exceed the width of the window. • Trace Viewing Level: Enables different levels of transaction to be displayed. • Display Configuration Name: A Comment field associated with the *.opt file containing the current Display Options values. You can also create and store your unique Display Options for future use. • Fonts: Allows field fonts and data fonts to be changed.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Version 1.6 Click Save... You see the Save As window. Step 3 Specify a filename (*.opt). Step 4 Click Save. 8.2 Color Display Options • Click the Colors tab on the Display Options screen. You see the Colors screen: Use this menu to customize the colors associated with each field in the Trace View. You can experiment with this option to achieve the color combination best suited to a particular graphic system.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 • All packets are colored with a + color when there is no Trigger. Use the color buttons labeled + and - under the Packet # section of the Colors screen to select a Trigger color. To select or change a color, • Click the appropriate color button. You see the color palette: Use this palette to choose the desired color for the Packet Types, Miscellaneous, Integrity, Handshake, Packet #, Access Codes, Data, Idle and Timestamp.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 8.3 Formats Display Options • Click the Formats tab on the Display Options screen. You see the Formats window: Select a number format corresponding to the column labels along the top of the screen for each number field that labels the rows along the left of the screen. The number format changes in the respective location in the packet view window. You can also select the bit ordering to be displayed.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 8.4 Hiding • Click the Hiding tab on the Display Options screen. You see the Hiding window: Use the Hiding window to hide various fields, packets, messages, and protocols from the Trace View screen. You can modify these settings at will to display a specific area of a Trace. Hiding Fields The "Hide Fields" checkboxes allow individual fields to be hidden within a trace. Click the checkbox(es) of your choice to hide one or more fields.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Columns labeled "0" through "7" and "All" represent the Active Member Address of a device. By checking one of the boxes in a column, you hide the traffic of the selected device (or traffic from all devices if you have selected All.) The row in which you place your checkmark determines whether you are hiding traffic going to or from a device.
CATC Merlin Protocol Analyzer User’s Manual 98 Version 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 9. Reading a CATC Trace 9.1 Trace View Features • The Merlin packet view display makes extensive use of color and graphics to fully document the captured traffic. • Packets are shown on separate rows, with their individual fields both labeled and color coded. • Packets are numbered (sequentially, as recorded), time-stamped, and highlighted to show the device status (master or slave). • Display formats can be named and saved for later use.
CATC Merlin Protocol Analyzer User’s Manual Version 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 You see the Packet menu: Step 2 Select Set Marker. You see the Edit Marker Comment window where you can enter a unique comment about this packet.: Step 3 Enter your comment. Step 4 Click OK. A marked packet is indicated by a vertical red bar along the left edge of the packet # block: 9.5 Edit or Clear Marker To clear or edit the comments associated with a packet marker, Step 1 Left-click on Packet # for the chosen packet.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Version 1.6 Select Edit marker. You see the Edit marker comment window: Step 3 Edit the comment as desired. Step 4 Click OK. To clear a Marker, Step 5 Click Clear marker. The vertical red Marker bar disappears. 9.6 Expanded and Collapsed Data Formats The data field can be expanded to display greater detail or collapsed to a compact view. The Expand/Collapse Data feature operates as a toggle. There are three ways to toggle between the two views.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 If your Data Trace View is currently expanded, you see the Collapse Data menu: If your Data Trace View is currently collapsed, you see the Expand Data menu: Note that you can choose to expand or collapse • Only the Data in the selected Data packet OR • Step 2 All Data Fields in the Trace View. Select the desired Expand Data or Collapse Data menu item.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 9.9 Hide Unassociated Traffic You can hide all traffic that is not associated with the current decode level by pressing the Hide Unassociated Traffic button on the Tool Bar. From the Tool Bar • First, click one or more decode buttons such as the View L2CAP Messages . This button will cause Merlin to decode the trace and display selected level of decode. • Next, click to hide all unassociated traffic.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 10. Decoding Higher Protocols 10.1 Introduction Merlin can decode LMP and L2CAP messages, and RFCOMM, SDP, TCS, HDLC, PPP, and OBEX protocols. The default is packet level decoding, which means that baseband packets will be displayed when you first view a trace. If these packets are carrying LMP, L2CAP or higher protocols, the protocols will display as undecoded fields such as the L2CAP packet below.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 10.3 Decoding and Viewing Higher Protocol Data Higher protocol data can be decoded two ways: by clicking a decode button on the toolbar or by selecting a decode command from a pull down menu.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Setup>Decoding Options Step 2 Select the option for the desired level of decoding. Step 3 Click OK or Apply. 10.4 Tooltips Additional information about fields can be attained by positioning your mouse pointer over a field of interest. A tooltip will appear that will provide details about the field. In some cases, there can be a considerable amount of information available.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 10.5 Viewing Packets in LMP and L2CAP Messages LMP and L2CAP Messages can be "opened" to reveal their constituent packets by double-clicking the first cell in of the message or clicking once on the small arrow on that same cell. The packets will then display below the message. The following screenshot shows an example of a message and its packets. Message Packets making up the message 10.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 LMP and L2CAP Signalling messages have payloads of commands for establishing LMP and L2CAP channels. L2CAP Data-Transfer messages have a payload that may include RFCOMM, SDP, or TCS data. In order to view higher protocol data, you will need to decode the messages (shown in the next section). The decoded data will appear as new lines in the trace called "Protocol Messages." 10.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Member Address). If possible, select an address other than the currently displayed address. The connections for the ’new’ device should now display. 10.8 Viewing Protocol Messages and Transactions By pressing a button such as or , you can cause Merlin to decode the higher level protocol data contained within L2CAP messages and display them as packet-like rows called Protocol Messages.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Expanding Protocol Messages Protocol messages can be expanded to reveal their constituent packets using any of the following methods: • Left-click the small downward pointing arrow in the message/protocol header • Double-click a message/protocol header • Left-click the message/protocol header and choose "Expand Transaction" from the short-cut menu 10.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 not already selected. At this point, the protocol assignment will change to your selection. Using the Decoding Assignments Dialog Box You can get a complete list of all protocol assignments by opening the Decoding Assignments dialog box. This dialog box will tell you which protocol assignments were made by Merlin and which are user-assigned. User-assigned protocols can be reassigned if need be using this dialog box.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 To remove some or all user-assigned protocol assignments, Step 1 Double-click any Protocol Message header to open view L2CAP messages. Step 2 Locate a message with a field marked "A." Step 3 Left-click on the "A" field to open the Assignment menu. Step 4 Select "Remove All User assignments" or "Remove this assignment.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 A pop-up menu will appear indicating whether the message was produced by an OBEX client or server. If the menu items appear Left-click over the Type field to open the OBEX Client/Server Assign menu. grayed-out (as they do in this example) it means that Merlin assigned the client or server status based on data it found in the trace.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 11. Other Features 11.1 Search The Search feature provides several options for searching through recorded traffic, allowing you to find specific packets based on triggering status, packet number, marking, or content. To view the Search options, • Click Search in the Menu bar. You see the Search drop-down menu: Go to Trigger To display a triggering event, select Go to Trigger under Search on the Menu bar.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 You see the Go to Packet/Message/Protocol window: Step 2 Enter the number of the packet, message or protocol you want to display. Step 3 Click OK. The Trace View repositions to show the packet at the top of your screen. Go to Marker To instruct the analyzer to display a marked packet, Step 1 Select Go to Marker under Search on the Menu Bar.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 You see the Go To drop-down menu: Step 2 Select the event you want to go to and enter the necessary information. Packet Types Select the type of packet you want to go to.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Header AM_Addr Select an Active Member Address from the list. DataLength Not yet implemented. Will allow searching based on data length in bytes from the recording. Lmp Opcode Select the Link Management Protocol Operational Code (Lmp Opcode) that you want to go to.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 L2Cap Signalling Command Select the type of L2Cap Signalling Command that you want to go to. L2Cap CID Select the L2Cap Channel ID (L2 Cap CID) that you want to go to. Error Moves trace view to next uncorrected error. Soft Bit Error Moves trace view to next soft (corrected) error. Loss of Sync Moves trace viewer to the next loss of sync.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Find Find is a utility within Merlin that allows you to conduct searches of one or more events within a trace. Find allows you to search different hierarchical levels within the trace - packets, LMP Messages, L2CAP messages etc. To start find, • Select Find... under Search on the Menu Bar OR Click in the Tool Bar.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The right area is context sensitive -- the Event Group selected in the Center area will determine what events will display on the right. For example, if you select Packet Type, the Right area will show you a list of packet types. Bold entries in the list represent items that actually occurred in the trace. In the screenshot shown above, for example, AM Address is selected. On the right, you see that only Address 1 is in bold.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 setting the ARQN field to 1. Acknowledgments are easily seen in Merlin traces because Merlin adds an Ack’d field on data packets of the transmitting device. This means that you do not have to hunt through the trace to see if the packet was acknowledged. The following screenshot shows two examples of Acknowledgments. Implicit NACK - Packet 14577 is a data packet sent by the piconet Master device.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Data Pattern Contains a pattern editor for entering data patterns in binary or hexadecimal format. A pattern editor is a utility that allows you to search for a data pattern. Searching for Bit Patterns You search for a bit pattern by using the box labeled Bitmask. Enter one of the three following values: • X = 'Don't care,' • 0 = 'Match a 0', • 1 = 'Match a 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Example - If you enter xxxxxx01 into row 0 and 11xxxxxx into row 4, it means 'Look for the pattern xxxxxx01 xxxxxxxx xxxxxxxx xxxxxxxx 11xxxxxx.' Searching for Hexadecimal Patterns The columns marked Match and Mask allow you to specify a pattern in hex. You enter the pattern you want to match in the column marked Match, and enter the mask in the column marked Mask. The Mask column allows you to specify which bits you are searching for.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Select a search direction and origin. Step 3 Select one or more events from the Events Group box. Version 1.6 Your choices will affect options presented in the box on the right side of the screen. Step 4 If you have selected two or more criteria, then select either : • Union: Find all packets that match ANY of the specified events. • Intersection: Find all packets that match ALL of the specified events.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Step 2 Select DM1 and Poll from the box on the right. Step 3 Select Header AM_Addr from the Event Group. Step 4 Select AM_Addr=7 from the box on the right. Step 5 From the Center area, select Intersection and Exclusion Step 6 Press OK. The trace will redisplay so that it excludes DM1 packets with AM_Addr=7 and Poll packets with AM_Addr=7. Exclude all packets with ANY of the following attributes: DM1, Poll, or AM_Addr=7.
CATC Merlin Protocol Analyzer User’s Manual Step 2 Create, view, or edit the comment. Step 3 Click OK. Version 1.6 11.3 Reports The Report menu provides several reports to assist you in analyzing Bluetooth™ traffic recorded by the analyzer. File Information To display a File Information report, • Select File Information under Report in the Menu Bar OR Click in the Tool Bar.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Timing Calculations Starts the modeless calculator dialog for calculating various timing and bandwidth parameters in the recording file. To display a File Information report, • Select Timing Calculations under Report in the Menu Bar OR Click in the Tool Bar. You see the File Information screen: To calculate bus usage and bit rate errors, Step 1 Enter the range of packets to be examined in the text boxes marked "From packet" and "To packet.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 Show Formulas Button At the bottom of the Timing and Bus Usage window is a button marked "Show Formulas." If clicked, the window shown below will open and describe how the bus usage calculations were performed. Traffic Summary The Traffic Summary command displays a text box with a summary of traffic captured in the current trace.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 The second section is scrollable: click on an item below one of the headings to display scroll arrows. The arrows will allow you to scroll through the packets or transactions within that section. As you scroll, the trace will simultaneously jump to the packet or transaction that is listed. At the bottom of the Traffic Summary window is a button marked "Textual Summary.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 11.4 BT Neighborhood The BT Neighborhood status box displays information about known Bluetooth™ devices. This command is accessible through the View menu in the menu bar. Three types of data are displayed: Device Address, Class of Device (COD), and the Bluetooth™ Clock Frequency for each discovered device. The expected Bluetooth™ clock frequency is 3200 Hz +/- 250 PPM. 11.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 allow Merlin to discover the Link Key on its own. Once Merlin has the Link Key, it can capture the rest of what it needs by listening to the Master and Slave devices as they negotiate for the Encryption Key.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 the PIN, skip to Step 5. Note The PIN you provide should be the same used by the Slave. For example, if your Slave device requires a PIN of "1234", then enter the same PIN in the dialog box shown above. Step 5 If you do not have the PIN, or if the Master and Slave have already agreed upon the Link Key, manually enter a Link Key as a 128 bit (sixteen byte) hex value into the box marked Current Link Key. If you have the PIN, you can skip this step.
CATC Merlin Protocol Analyzer User’s Manual 134 Version 1.
CATC Merlin Protocol Analyzer User’s Manual Version 1.6 12. How to Contact CATC Contact Type of Service Call for technical support… US and Canada: 1 (800) 909-2282 Worldwide: 1 (408) 727-6600 Fax your questions… Worldwide: 1 (408) 727-6622 Write a letter… Computer Access Technology Corp. Customer Support 2403 Walsh Avenue Santa Clara, CA 95051-1302 Send e-mail… support@CATC.com Visit CATC’s web site… http://www.CATC.com/ 13.